Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/3137372e39332e3134342e302f32332d3233203d3e203532383631.roa
File:                     3137372e39332e3134342e302f32332d3233203d3e203532383631.roa (raw, json)
Hash identifier:          k9SdQn52cNx3pCOH16jpXMF2mR7ZhoHzXi+2tB3e604=
Subject key identifier:   FB:7F:6C:5A:19:6F:32:C7:14:5B:D7:74:E3:DA:7D:4E:51:12:7A:73
Certificate issuer:       /CN=088FBECC3D734875CDC23B55B9E5092EA27DF270
Certificate serial:       3C5EC86ACF4DED0785C2D8F58C950A839F5852CD
Authority key identifier: 08:8F:BE:CC:3D:73:48:75:CD:C2:3B:55:B9:E5:09:2E:A2:7D:F2:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088FBECC3D734875CDC23B55B9E5092EA27DF270.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/3137372e39332e3134342e302f32332d3233203d3e203532383631.roa
Signing time:             Tue 24 Dec 2024 13:51:07 +0000
ROA not before:           Tue 24 Dec 2024 13:46:07 +0000
ROA not after:            Tue 23 Dec 2025 13:51:07 +0000
asID:                     52861
IP address blocks:        177.93.144.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/088FBECC3D734875CDC23B55B9E5092EA27DF270.crl
                          rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/088FBECC3D734875CDC23B55B9E5092EA27DF270.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088FBECC3D734875CDC23B55B9E5092EA27DF270.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 11:32:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:5e:c8:6a:cf:4d:ed:07:85:c2:d8:f5:8c:95:0a:83:9f:58:52:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=088FBECC3D734875CDC23B55B9E5092EA27DF270
        Validity
            Not Before: Dec 24 13:46:07 2024 GMT
            Not After : Dec 23 13:51:07 2025 GMT
        Subject: CN=FB7F6C5A196F32C7145BD774E3DA7D4E51127A73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:18:df:c5:a8:c2:59:62:cc:49:df:5c:8d:a1:
                    a7:f5:59:e9:eb:2c:0d:27:07:93:d8:b3:4c:26:48:
                    a5:b2:c2:d2:e1:94:f8:d9:06:0a:44:9f:8c:b9:af:
                    a4:3f:4d:b1:09:9c:9b:9e:de:39:5f:d9:74:b5:8c:
                    00:7e:15:93:11:33:d0:57:c7:6b:30:62:2b:5d:e3:
                    c1:d7:81:20:3b:95:f4:11:5a:c9:10:95:75:b8:4c:
                    28:ec:bb:cb:82:23:0a:09:24:c9:53:93:5e:f7:c8:
                    40:65:80:63:0f:99:b7:b2:6c:57:98:8c:cd:63:d3:
                    2c:37:80:63:a0:e3:f0:56:82:33:e0:e3:a5:d0:4b:
                    ea:69:0a:67:a5:46:56:58:4f:e3:68:fc:70:c2:f7:
                    13:48:c1:6f:81:68:75:b7:0b:3d:1f:1e:95:1d:ca:
                    96:53:f6:e9:fd:8f:fe:78:b4:29:e5:56:91:38:fe:
                    61:6e:3d:62:73:ec:cc:69:a4:ea:f9:74:ae:13:37:
                    88:9c:b4:71:7f:cd:ee:3f:c7:00:53:05:06:37:93:
                    ce:a2:16:2b:16:d0:ab:9d:db:b3:04:0f:18:f6:2a:
                    48:96:2c:ce:5b:c4:95:01:b6:91:a9:7e:b7:de:93:
                    94:f6:65:42:fa:48:38:1a:e8:e5:4b:de:54:63:2e:
                    3f:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:7F:6C:5A:19:6F:32:C7:14:5B:D7:74:E3:DA:7D:4E:51:12:7A:73
            X509v3 Authority Key Identifier:
                keyid:08:8F:BE:CC:3D:73:48:75:CD:C2:3B:55:B9:E5:09:2E:A2:7D:F2:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/088FBECC3D734875CDC23B55B9E5092EA27DF270.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088FBECC3D734875CDC23B55B9E5092EA27DF270.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/3137372e39332e3134342e302f32332d3233203d3e203532383631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.93.144.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1b:23:c1:be:a4:32:1b:3b:7d:70:54:7d:1f:df:3e:9d:7d:6f:
         a6:ae:da:98:16:4d:51:61:27:01:10:80:d0:66:d5:fc:99:98:
         b3:f3:a8:48:23:30:a9:ae:1e:5c:6a:c6:6b:b7:ea:66:06:31:
         6e:6d:a2:3e:17:34:34:f8:fb:52:b9:c1:f2:c6:55:c1:a8:94:
         45:ca:24:25:ad:1a:25:e2:cd:91:6a:47:8c:43:06:3f:2e:98:
         5a:f5:86:ff:0b:3b:6c:3c:b6:6c:ae:14:6f:ee:c0:a8:59:66:
         51:92:ec:dd:8b:5a:ed:fa:59:96:8c:2b:8e:3e:1c:51:e6:3c:
         af:64:f6:fb:5f:fc:5d:fa:db:35:91:77:5a:c8:c2:ab:44:56:
         fb:fa:c4:76:b9:ca:bd:a9:e0:00:02:78:4e:8c:b0:36:c9:bd:
         1e:97:09:c5:e4:84:86:43:81:4a:aa:47:57:d6:c2:1a:c3:b6:
         48:a0:80:0c:27:c1:86:cc:ce:7a:f9:5d:aa:c5:19:6f:09:32:
         de:e4:ed:fb:3b:ed:bb:e0:4c:cd:2d:c2:da:36:ee:af:6a:2b:
         bd:7f:99:c6:fc:61:6a:bb:84:12:6c:8c:ba:ac:e0:59:27:79:
         f2:e9:e8:5f:59:c6:6d:3e:06:06:9b:1f:90:e8:08:88:fe:ef:
         92:f1:72:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:24:36 2025 by rpki-client